1. Sign in to the https://app.icompaas.com portal.

  2. In the left navigation pane, select Account Settings & Onboarding, then choose Oracle Cloud. 



  1. Click on connect OCI cloud


Step 1: Create a read-only iCompaas identity

  1. Sign in to the OCI Console.

  2. Open the navigation menu (☰), go to Identity & Security, and under Identity select Domains.



  1. Select your current identity domain (usually Default).

  2. Copy your Tenancy OCID and paste it into the Tenancy OCID field in iCompaas.

            

  1. Under User Management, create a new user for iCompaas, such as icompaas-auditor. Copy the new user’s OCID and paste it into the User OCID field in iCompaas.

 


  1. Under User Management, create a group with a descriptive name, such as iCompaas-readonly, and add the user you created in the previous step.



Step 2: Attach the read-only policy

  1. Go to Identity & Security → Policies and click Create Policy.

  2. Enter a name for the policy, such as iCompaas-readonly-policy. Make sure the policy is created in the root compartment.

  3. Switch to Show manual editor and add the following statements:


Allow group '<identity-domain>'/'<group-name>' to inspect tenancies in tenancy

Allow group '<identity-domain>'/'<group-name>' to inspect compartments in tenancy

Allow group '<identity-domain>'/'<group-name>' to read policies in tenancy

Allow group '<identity-domain>'/'<group-name>' to read all-resources in tenancy


           Note: Modify the default identity-domain name and the group name created in Step 1

  1. Click Create. 


Step 3: Create an API signing key

  1. Open the user you created in Step 1 (for example, icompaas-auditor).

  2. Go to API Keys and click Add API Key.

  1. Select Generate API Key Pair, click Download Private Key, and then click Add.

            

  1. Copy the fingerprint of the new key and paste it into the Fingerprint field in iCompaas.

  1. Open the downloaded private key file, copy its full contents (including the BEGIN and END lines), and paste them into the API Signing Private Key field in iCompaas.

  2. Click on save and validate.